Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File:                     lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier:          BMoIo/Oro9UsZL0ntQpifcxtcJqctq5GMgq3mh3ZtxE=
Subject key identifier:   D4:60:F5:AE:54:71:35:A3:92:EA:88:8D:6D:D5:FD:BE:3F:B5:E6:F9
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       0459
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number:          0439
Signing time:             Mon 11 Aug 2025 00:30:10 +0000
Manifest this update:     Mon 11 Aug 2025 00:30:09 +0000
Manifest next update:     Mon 18 Aug 2025 00:30:09 +0000
Files and hashes:         1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: QvYVwWBEXVKldSYJYnCE7/vfnGSoKtuNc+bu1viLB/k=)
                          2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=)
                          3: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=)
                          4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=)
                          5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 1RhS2h2tWn1m1rNY8jrx9gtNAHNEkDyNHgYU79X2jK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Aug 11 00:30:09 2025 GMT
            Not After : Aug 18 00:30:09 2025 GMT
        Subject: CN=68993991-33ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:59:73:b2:11:3a:3f:c9:c1:7b:fb:ec:a8:
                    bd:50:55:04:be:ab:0f:8a:01:3d:0a:77:fa:c4:47:
                    36:bb:23:fa:a7:14:a0:35:6a:b1:f1:d4:08:41:63:
                    54:9b:18:9a:77:c9:a8:00:4b:04:7f:41:50:e9:4c:
                    37:85:b8:dc:3b:5f:a6:6a:f1:25:5c:61:99:64:f2:
                    77:e5:ed:af:fe:2c:f8:c4:cd:c5:44:0a:34:6d:20:
                    3c:71:e2:46:61:29:c8:bb:e8:4f:c1:60:7f:b8:e3:
                    e9:9f:e3:44:81:98:14:b0:ba:b8:7e:c1:30:d8:98:
                    e8:7a:71:ac:b5:77:35:b8:38:4c:fb:b8:52:27:67:
                    b0:e3:c5:23:60:6b:e7:ff:44:3c:e7:79:36:50:51:
                    47:40:6d:a8:6b:8d:bc:53:34:d8:ba:0e:9f:d1:78:
                    c6:16:00:cd:21:38:77:15:b5:80:d1:a7:c1:1f:66:
                    50:e0:0c:44:c8:5b:09:d6:76:bf:35:01:64:07:1f:
                    f8:6a:34:2e:33:09:a7:f9:ad:03:cd:e1:2f:fe:c0:
                    7c:8b:71:6e:a0:8e:64:ec:cb:d9:b2:0b:86:df:02:
                    0f:61:72:c0:6f:c6:27:f6:97:ab:1e:12:23:69:b2:
                    15:a0:aa:2b:7d:89:94:ed:6e:75:98:f3:d1:5d:ec:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:F5:AE:54:71:35:A3:92:EA:88:8D:6D:D5:FD:BE:3F:B5:E6:F9
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:77:c9:a2:ab:3f:32:36:f8:a5:61:27:db:97:0f:a7:b1:
         07:80:4b:76:92:6e:47:1d:e5:a9:59:73:cb:4b:7b:56:9d:03:
         0e:c4:37:4e:87:d5:59:ec:bc:f5:53:be:95:58:3c:71:9f:29:
         83:28:1f:61:21:a9:e3:d5:63:a9:f3:72:ea:94:d0:f8:08:ba:
         b8:49:1c:44:86:95:10:77:96:22:c8:d2:0e:7a:5e:ff:58:b6:
         69:be:ac:18:d1:48:a7:ae:9a:48:08:6e:b1:59:14:a5:a8:f4:
         20:31:8e:10:a4:27:90:51:bf:b7:6a:33:aa:3a:5d:4b:5d:1e:
         f2:57:76:63:46:47:57:c2:ec:50:50:dc:e3:40:d5:f0:f7:e3:
         7d:79:57:88:6f:1d:b7:eb:0e:e6:0f:97:6d:ff:24:54:a4:86:
         67:63:11:8f:d0:63:7a:c4:3a:9d:c7:b1:a5:eb:cf:22:84:9e:
         46:f2:88:35:d4:4d:48:ba:e1:45:56:7f:fc:eb:25:11:2f:80:
         95:c4:cf:00:77:6e:43:23:bb:69:75:bf:0f:aa:ff:f8:82:c7:
         a2:05:98:5e:64:83:af:44:07:6b:c5:8c:ad:73:53:31:52:55:
         1d:d7:ea:ac:3d:e9:bc:11:a7:4d:ef:00:5c:92:a5:09:92:fa:
         08:11:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:45 2025 by rpki-client